EIP-2026-111674

The exploit describes a Remote File Include (RFI) vulnerability in Ramui web hosting directory script 4.0, where the `$root` parameter in the `connection.php` constructor is not validated before being used in an `include` statement. This allows an attacker to include arbitrary remote files by manipulating the `root` parameter.